Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/4ed3dd4d6291df1250b0089e1f81c299ddac349d.roa
File:                     4ed3dd4d6291df1250b0089e1f81c299ddac349d.roa (raw, json)
Hash identifier:          soVhO6VdGqEFvDiz9CAa5YfapYoDaEw/glqJcaZWt7I=
Subject key identifier:   E5:A0:C8:3A:33:EF:8B:21:3F:24:CF:36:29:31:A5:D7:CB:C5:36:F8
Certificate issuer:       /CN=8b9a11aeaeba482db300e5c15088db3c41615181
Certificate serial:       0B25E0
Authority key identifier: D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/4ed3dd4d6291df1250b0089e1f81c299ddac349d.roa
Signing time:             Fri 26 Jan 2024 00:08:18 +0000
ROA not before:           Fri 26 Jan 2024 00:08:18 +0000
ROA not after:            Mon 26 Jan 2026 00:08:18 +0000
asID:                     11415
IP address blocks:        2803:6290::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730592 (0xb25e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9a11aeaeba482db300e5c15088db3c41615181
        Validity
            Not Before: Jan 26 00:08:18 2024 GMT
            Not After : Jan 26 00:08:18 2026 GMT
        Subject: CN=4ed3dd4d6291df1250b0089e1f81c299ddac349d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:16:14:fa:69:4b:51:67:5b:7d:e1:40:33:
                    f7:61:33:23:b0:d6:96:36:fc:2c:61:6d:54:60:14:
                    87:a2:09:ae:91:75:56:53:d3:3f:5f:1e:58:de:06:
                    95:38:32:9d:b6:13:c2:f0:21:f0:45:1f:42:86:fa:
                    2b:06:fc:22:e1:55:9b:64:33:95:08:e7:b8:9a:f2:
                    68:74:67:b3:12:9f:7b:19:18:e1:24:15:0e:80:54:
                    0c:45:7e:fa:ca:07:25:66:c2:b1:65:2c:59:b6:bf:
                    ef:b7:d8:82:31:93:0e:4e:8b:c2:e4:ae:da:72:3e:
                    a9:25:af:24:6b:aa:8b:19:f3:28:09:e4:19:96:9d:
                    a0:b6:de:56:67:f7:95:de:49:9f:b6:0a:b6:ac:3d:
                    36:4b:84:ca:44:cb:0d:68:6c:d5:48:e0:3d:77:8d:
                    08:da:c5:d6:59:8a:02:96:86:09:e8:4c:3b:dc:65:
                    52:8f:04:fe:ba:16:48:9d:89:88:42:46:cd:0b:72:
                    ee:e7:2e:4d:8f:2d:b2:66:91:5d:eb:56:76:66:7d:
                    16:e2:a1:6f:3f:15:d0:37:8c:53:cc:2a:0b:1d:30:
                    9e:4b:5a:56:58:a9:bf:5e:8d:e4:b1:40:e0:57:0c:
                    b1:82:d8:64:21:d0:c1:3a:87:46:d6:10:5a:f0:30:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A0:C8:3A:33:EF:8B:21:3F:24:CF:36:29:31:A5:D7:CB:C5:36:F8
            X509v3 Authority Key Identifier:
                keyid:D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/4ed3dd4d6291df1250b0089e1f81c299ddac349d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/8b9a11aeaeba482db300e5c15088db3c41615181.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:f7:41:b3:f8:1d:b5:70:5f:7c:ec:05:a6:20:15:5d:d7:5d:
         88:36:b5:64:82:9b:d5:26:0a:76:32:8e:e5:6b:ed:f0:35:12:
         e1:40:a8:eb:1e:95:05:7e:32:79:79:92:6e:e2:26:f9:ff:ed:
         3d:a9:c0:6a:73:82:c7:25:d0:ef:fa:72:55:b7:ce:6d:b2:e8:
         28:3e:41:46:82:2d:d9:28:a4:69:40:5d:6d:c7:4e:27:7a:e4:
         1c:f2:8a:71:87:c1:96:3f:6b:71:ea:52:b4:24:34:9b:10:89:
         d4:25:12:c1:a4:29:71:b7:8c:c2:a7:a3:04:63:b9:fb:25:0c:
         e0:96:af:2d:ca:70:0e:82:00:d6:b5:0d:44:f9:8f:7a:8e:00:
         fd:b4:1d:3d:e5:3c:3e:ea:db:66:9e:cf:d2:77:31:f1:e0:ae:
         35:79:ae:6d:7d:1f:c6:da:de:47:6b:39:4c:c7:7c:de:12:b6:
         94:45:a8:93:7a:03:9d:d3:8b:45:4b:7e:16:f0:0e:66:e5:8c:
         fd:0f:76:f6:bc:70:24:33:5c:af:66:ac:17:27:f8:70:f8:76:
         e9:df:a8:bf:cb:c3:c9:5b:4d:3a:8a:07:c1:d7:eb:bc:e6:aa:
         f7:ab:e1:09:6d:66:00:5a:32:ed:0d:46:89:d7:90:a0:87:d7:
         58:a7:20:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----